diff --git a/config/ipblocklist/sources b/config/ipblocklist/sources index 69f964dd9..1cef06dd1 100644 --- a/config/ipblocklist/sources +++ b/config/ipblocklist/sources @@ -142,5 +142,11 @@ our %sources = ( 'EMERGING_FWRULE' => { 'name' => 'Emerging Threats Blocklis 'info' => 'https://blacklist.3coresec.net', 'parser' => 'ip-or-net-list', 'rate' => '1d', - 'category' => 'attacker' } + 'category' => 'attacker' }, + 'ABUSECH_BOTNETC2' => { 'name' => 'ABUSE.ch Botnet C2 IP Blocklist', + 'url' => 'https://sslbl.abuse.ch/blacklist/sslipblacklist.txt', + 'info' => 'https://sslbl.abuse.ch/blacklist#botnet-c2-ips-csv', + 'parser' => 'ip-or-net-list', + 'rate' => '5m', + 'category' => 'reputation' } );